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DCI/IC 73-0771 
20 July 1973 


MEMORANDUM FOR THE RECORD 


SUBJECT: Attendance at National Computer Conference and 
Exposition - June 6-7, New York Coliseum, N.Y. 


1. I went to the National Computer Conference and 
Exposition on June 6-7 to attend sessions on computer secur- 
ity and privacy. Of the five sessions I attended, two were 
concerned more with privacy as an individual right than with 
privacy as an aspect of data security. 


2. No concrete advances in security development were 
reported in the session on data security in government. 
It was apparent, however, that the panelists in government 
have developed greater confidence both in the techngques 
used for computer security and in their own ability to 
evaluate security in specific systems. I regard this as 
a major advance since confidence on the part of system secur- 
ity officers in the security of their systems and in their 
own ability to evaluate it under varying circumstances is 
the sine qua non for successful operation of secure data 
systems, 


3. The session on the Interim Report from IBM Data 
Security Study Sites consisted of a discussion of the effort 
being contracted by IBM with MIT, TRW, and_the State of 
Illinois; the same ground was covered by 
in his briefing to the IHC on 13 June (see IHC-MM-415, 6 J 
July 1973). 


4. In the session on Secure Data Systems, Mr. Peter 
S. Browne of State Farm Mutual Automobile Insurance Co. said 
that the "risk management" approach to security is a natural 
for insurance companies whose whole existence is predicated 
upon the calculations of risks. Mr. Jim Clayton discussed 
the requirements for secure data in DoD. Mr. Richard G. 
Mills, First National City Bank, discussed the problem of 
data security in banking systems; the requirements appear 
to be as stringent as those for intelligence data. 
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STAT 
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5. Due to conflicts between the schedule for the Ex- 
position and the sessions on data security, I was unable 
to cover the manufacturers exhibits of equipment as I wished. 
I feel that as much as one day could have profitably been 
spent becoming familiar with new terminal equipment. It is 
recommended that time be allowed for the Exposition as well 
as the conference sessions if an IC representative is sent 
to a future NCC, 


STAT 
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